Switch>enable
Switch#configure terminal
Switch(config)#interface range f0/1-3
Switch(config-if-range)#switchport access vlan 2
Switch(config)#interface fastEthernet 0/4
Switch(config-if)#switchport mode trunk
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/3
Switch(config-if)#switchport mode trunk
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/4
Switch(config-if)#switchport mode trunk
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/3
Switch(config-if)#switchport mode trunk
Switch>enable
Switch#configure terminal
Switch(config)#ip routing
Switch(config)#interface range fastEthernet 0/1-4
Switch(config-if-range)#switchport trunk encapsulation dot1q
Switch(config-if-range)#switchport mode trunk
Switch(config)#vlan 2
Switch(config-vlan)#exit
Switch(config)#in vlan 1
Switch(config-if)#ip address 192.168.1.252 255.255.255.0
Switch(config-if)#no shutdown
Switch(config-if)#exit
Switch(config)#in vlan 2
Switch(config-if)#ip address 192.168.2.252 255.255.255.0
Switch(config-if)#no shutdown
Switch(config-if)#exit
Switch(config)#interface fastEthernet 0/5
Switch(config-if)#no switchport
Switch(config-if)#ip address 192.168.3.1 255.255.255.0
Switch(config-if)#no shutdown
Switch(config)#ip route 0.0.0.0 0.0.0.0 192.168.3.2 配置默认路由 下一条交给 192.168.3.2
Router>enable
Router#configure terminal
Router(config)#interface fastEthernet 0/0
Router(config-if)#ip address 192.168.3.2 255.255.255.0 路由端口配IP
Router(config-if)#no shutdown
Router(config)#interface fastEthernet 0/1
Router(config-if)#ip add 200.0.0.253 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#ip route 192.168.1.0 255.255.255.0 192.168.3.1 配置静态路由
Router(config)#ip route 192.168.2.0 255.255.255.0 192.168.3.1
Router(config)#ip route 0.0.0.0 0.0.0.0 f0/1
Router(config)#access-list 1 permit 192.168.1.0 0.0.0.255 配置控制列表
Router(config)#ip nat inside source list 1 interface fastEthernet 0/1
Router(config)#interface fastEthernet 0/0
Router(config-if)#ip nat inside
Router(config-if)#exit
Router(config)#interface fastEthernet 0/1
Router(config-if)#ip nat outside
Router(config)#ip nat inside source static tcp 192.168.2.2 80 200.0.0.253 80 段口映射
配置1网段的DHCP
Switch(config)#ip dhcp pool vlan1 创建DHCP地址池
Switch(dhcp-config)#network 192.168.1.0 255.255.255.0 配置地址池网段
Switch(dhcp-config)#default-router 192.168.1.252 配置网关
Switch(dhcp-config)#dns-server 8.8.8.8 配置dns
Switch(dhcp-config)#exit
Switch(config)#ip dhcp excluded-address 192.168.1.1 192.168.1.99 去除IP(保留IP)
Switch(config)#ip dhcp excluded-address 192.168.1.201 192.168.1.254 去除IP (保留IP)
在实验一的基础上
第一步。配置trunm
两个三层交换机链接两根线配置 trunk 和以太通道
三层交换机配置trunk 链路
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/1
Switch(config-if)#switchport trunk encapsulation dot1q
Switch(config-if)#switchport mode trunk
Switch(config-if)#exit
Switch(config)#interface fastEthernet 0/2
Switch(config-if)#switchport trunk encapsulation dot1q
Switch(config-if)#switchport mode trunk
Switch(config-if)#exit
Switch(config)#interface fastEthernet 0/3
Switch(config-if)#switchport trunk encapsulation dot1q
Switch(config-if)#switchport mode trunk
Switch(config-if)#exit
Switch(config)#interface fastEthernet 0/4
Switch(config-if)#switchport trunk encapsulation dot1q
Switch(config-if)#switchport mode trunk
Switch(config-if)#exit
两个三层交换机相连接的两根线配置trunk链路和以太通道
Switch(config)#interface range fastEthernet 0/6-7
Switch(config-if-range)#switchport trunk encapsulation dot1q trunk 链路 配置以太通道
Switch(config-if-range)#switchport mode trunk
Switch(config-if-range)#channel-group 1 mode on
二层交换机配置trunk 链路
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/5
Switch(config-if)#switchport mode trunk
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/4 trunk链路
Switch(config-if)#switchport mode trunk
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/5 trunk链路
Switch(config-if)#switchport mode trunk
Switch>enable
Switch#configure terminal
Switch(config)#interface fastEthernet 0/3
Switch(config-if)#switchport mode trunk
Switch#configure terminal
Switch(config)#spanning-tree vlan 1 root primary
Switch(config)#spanning-tree vlan 2 root secondary 生命树 (STP)左边vlan1为主根 vlan 2为次根
Switch(config)#interface vlan 1
Switch(config-if)#standby 1 ip 192.168.1.254
Switch(config-if)#standby 1 Priority 200 HSRP
Switch(config-if)#standby 1 preempt
Switch(config-if)#standby 1 track fastEthernet 0/5
Switch(config)#in vlan 2
Switch(config-if)#standby 2 ip 192.168.2.254
Switch(config-if)#standby 2 priority 195
Switch(config-if)#standby 2 preempt
Switch(config)#spanning-tree vlan 1 root secondary 右边vlan1为次根vlan2为主根
Switch(config)#spanning-tree vlan 2 root primary
Switch(config)#interface vlan 1
Switch(config-if)#standby 1 IP 192.168.1.254
Switch(config-if)#standby 1 Priority 195
Switch(config-if)#standby 1 preempt
Switch(config-if)#standby 1 track fastEthernet 0/5 HSRP
Switch(config)#in vlan 2
Switch(config-if)#standby 2 ip 192.168.2.254
Switch(config-if)#standby 2 priority 200
Switch(config-if)#standby 2 preempt Switch#show standby brief 查看HSRP
Switch(config)#ip dhcp pool vlan1
Switch(dhcp-config)#no default-router 192.168.1.252 修改 DHCP网关
Switch(dhcp-config)#default-router 192.168.1.254
Switch(config)#ip dhcp pool vlan1
Switch(dhcp-config)#network 192.168.1.0 255.255.255.0
Switch(dhcp-config)#default-router 195.168.1.254
Switch(dhcp-config)#dns-server 8.8.8.8 右边的DHCP 注 两边设置的ip设置的地址不要相同
Switch(dhcp-config)#exit
Switch(config)#ip dhcp excluded-address 192.168.1.101 192.168.1.254
路由器配置动态路由RIP
Switch(config)#interface f0/5
Switch(config-if)#no switchport 三层交换机端口配置IP
Switch(config-if)#ip add 192.168.4.1 255.255.255.0
Switch(config-if)#no shutdown
链接路由器 配置接口IP
Router(config)#interface fastEthernet 1/0
Router(config-if)#ip address 192.168.4.2 255.255.255.0
Router(config-if)#no shutdown
查看路由表
Router#show ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default, U - per-user static route, o - ODR
P - periodic downloaded static route
S 192.168.1.0/24 [1/0] via 192.168.3.1
S 192.168.2.0/24 [1/0] via 192.168.3.1
C 192.168.3.0/24 is directly connected, FastEthernet0/0
C 192.168.4.0/24 is directly connected, FastEthernet1/0
C 200.0.0.0/24 is directly connected, FastEthernet0/1
S* 0.0.0.0/0 is directly connected, FastEthernet0/1
删除静态路由
Router(config)#no ip route 192.168.1.0 255.255.255.0 192.168.3.1
Router(config)#no ip route 192.168.2.0 255.255.255.0 192.168.3.1
重新配置动态路由RIP
Router(config)#router rip
Router(config-router)#version 2
Router(config-router)#no auto-summary
Router(config-router)#network 192.168.3.0
Router(config-router)#network 192.168.4.0 路由器
Switch>enable
Switch#conf t
Switch(config)#route rip
Switch(config-router)#version 2
Switch(config-router)#no auto-summary
Switch(config-router)#network 192.168.4.0
Switch(config-router)#network 192.168.1.0 右边三层交换配置动态路由
Switch(config-router)#network 192.168.2.0
Switch(config)#route rip
Switch(config-router)#version 2
Switch(config-router)#no auto-summary
Switch(config-router)#network 192.168.3.0
Switch(config-router)#network 192.168.1.0
Switch(config-router)#network 192.168.2.0 左边三层交换机配置动态路由
在新添加的路由器的接口f1/0启用 地址转换
Router(config)#interface fastEthernet 1/0
Router(config-if)#ip nat inside
Switch(config)#no ip route 0.0.0.0 0.0.0.0 192.168.3.2 删除三层交换机配置默认路由
Router(config)#router rip
Router(config-router)#version 2
Router(config-router)#no auto-summary
Router(config-router)#default-information originate 在路由器配置宣告默认路由
添加新的路由器、
Router>en
Router#configuer terminal
Router(config)#interface fastEthernet 0/0
Router(config-if)#ip address 192.168.6.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#in f0/1
Router(config-if)#ip address 200.0.0.254 255.255.255.0 新添加的路由端口配置IP
Router(config-if)#no shutdown
Router(config-if)#in f1/0
Router(config-if)#ip address 192.168.5.2 255.255.255.0
Router(config-if)#no shutdown
Switch(config)#interface f0/8
Switch(config-if)#no switchport
Switch(config-if)#ip address 192.168.6.1 255.255.255.0 左边三层交换机新的端口配置IP
Switch(config-if)#no shutdown
Switch>enable
Switch(config)#interface fastEthernet 0/8
Switch(config-if)#no switchport
Switch(config-if)#ip address 192.168.5.1 255.255.255.0 右边三层交换机新连接的端口配置IP
Switch(config-if)#no shutdown
配置动态路由
Router(config)#route rip
Router(config-router)#version 2
Router(config-router)#no auto-summary
Router(config-router)#network 192.168.6.0
Router(config-router)#network 192.168.5.0
Router(config)#ip route 0.0.0.0 0.0.0.0 f0/1 配置默认路由
Router(config)#router rip
Router(config-router)#version 2
Router(config-router)#no auto-summary
Router(config-router)#default-information originate 宣告默认路
Switch>enable
Switch#conf terminal
Switch(config)#router rip
Switch(config-router)#version 2
Switch(config-router)#no auto-summary
Switch(config-router)#network 192.168.5.0 右边三层交换机新端口增加配置动态路由
Switch>enable
Switch#configure terminal
Switch(config)#router rip
Switch(config-router)#version 2
Switch(config-router)#no auto-summary
Switch(config-router)#network 192.168.6.0 左边三层交换机端口配置动态路由
新添路由器配置PAT地址转换
Router>en
Router#
Router#
Router#
Router#
Router#ac
Router#conf
Router#configure t
Router#configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)#ac
Router(config)#access-list 1
Router(config)#access-list 1 IN
Router(config)#access-list 1 p
Router(config)#access-list 1 permit in
Router(config)#access-list 1 permit ?
A.B.C.D Address to match
any Any source host
host A single host address
Router(config)#access-list 1 permit 192.168.1.0 0.0.0.255 设置 标准的访问控制列表,允许192.168.1.0/24
Router(config)#ip nat inside source list 1 interface fastEthernet 0/1 overload 配置PAT
Router(config)#interface fastEthernet 0/0
Router(config-if)#ip nat inside
Router(config-if)#exit
Router(config)#interface fastEthernet 1/0 端口应用 PAT
Router(config-if)#ip nat inside
Router(config-if)#exit
Router(config)#interface fastEthernet 0/1
Router(config-if)#ip nat outside
Router(config)#ip nat inside source static tcp 192.168.2.2 80 200.0.0.254 80 配置端口映射